Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: ndiAT74Bmba6ydQulyCQuPgdiorBunAHV6ys4umBbt8=
Subject key identifier: F1:97:57:DC:B4:AF:6C:EE:74:DD:A6:61:51:97:94:4E:F8:2E:56:01
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 0196A1D2DCF19E675A778A748F59CF468505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0BDC
Signing time: Mon 05 May 2025 19:01:12 +0000
Manifest this update: Mon 05 May 2025 19:01:12 +0000
Manifest next update: Tue 06 May 2025 19:01:12 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: 2JRsKXkz/wQ8aBHGJpFb/Ocl7LLiKXQP6O2rIM1sc4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:dc:f1:9e:67:5a:77:8a:74:8f:59:cf:46:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: May 5 19:01:12 2025 GMT
Not After : May 6 19:01:12 2025 GMT
Subject: CN=f19757dcb4af6cee74dda6615197944ef82e5601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:67:6d:71:d6:b4:d5:d6:5e:7c:a0:3e:ec:
19:0e:12:5d:fc:e4:6f:dd:13:99:d4:ca:48:fa:38:
9f:7a:e1:36:59:c4:e9:e5:84:de:fc:91:7a:a1:8c:
49:69:b4:27:72:03:0f:3d:fd:e3:46:7f:27:56:ab:
c6:0c:fd:04:42:8a:5e:1a:7b:f7:1c:4f:a5:48:e7:
ab:70:80:8c:5a:e0:e1:a0:ae:ea:a0:d6:45:ba:10:
08:9b:8b:f5:6f:cb:bc:a1:4c:57:8a:3b:b4:81:e0:
0b:1c:a8:07:54:06:ba:3a:28:a8:1e:a3:ff:fe:60:
de:76:2c:0b:8b:25:7a:d2:e4:2b:86:02:f4:e2:fb:
fd:87:9a:c4:e8:69:10:a3:87:82:0e:fc:2f:c1:12:
43:ed:fe:44:3e:ab:52:6a:7d:a2:f5:12:b3:24:c5:
a4:f1:a2:ef:06:82:33:3b:0b:08:5b:66:5d:ac:32:
63:9e:ed:6d:be:99:e2:ba:9a:22:e3:ff:09:09:58:
f1:af:c3:fc:c6:02:14:67:9c:71:1d:5d:84:dd:a4:
3f:2a:07:0a:b5:56:4f:c5:53:4b:2d:a7:aa:d7:07:
db:11:c7:07:c9:ba:2a:e3:ee:92:8a:2c:3d:bd:74:
69:70:fb:f5:d6:14:26:9c:e3:7e:53:64:9c:50:06:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:57:DC:B4:AF:6C:EE:74:DD:A6:61:51:97:94:4E:F8:2E:56:01
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:47:90:17:5c:68:22:8b:1a:ad:1c:a7:4a:4a:52:f7:6f:
7f:f3:9b:13:41:28:cc:57:15:c2:dc:f8:de:54:a8:c6:c9:6e:
84:17:a7:df:8e:6a:5f:00:79:18:23:1c:89:43:a3:a8:fa:62:
e8:67:be:38:e5:79:1f:26:61:94:e4:79:35:52:bf:29:8f:00:
09:a0:c4:d9:dd:2d:6d:1e:66:47:67:62:08:5c:fb:b8:ea:30:
f2:5d:f6:36:ff:ab:b9:3a:b9:1a:42:60:fa:1c:f4:3d:7b:d7:
92:5e:49:d3:53:86:68:0c:0c:33:b2:70:dc:5c:f9:52:e9:24:
a9:3d:5f:c7:0d:aa:6a:5d:1d:d7:6e:ca:77:a5:48:24:24:da:
68:99:98:d8:26:25:91:8b:80:55:c8:e4:fb:65:77:a2:42:a3:
f9:9e:9e:80:35:d4:1b:e5:35:6a:47:34:34:79:e0:d3:88:77:
ff:e9:ac:99:1c:77:48:dd:5e:54:e0:5d:09:c2:83:48:79:b3:
5f:ea:dc:2d:0c:11:06:70:c4:32:8d:94:f5:d1:a9:74:e8:c1:
d0:03:57:3c:f8:6c:60:44:6b:7f:b0:63:b9:20:ae:bb:5f:04:
98:51:c6:45:64:6b:29:56:84:42:94:e0:cf:c5:e1:47:8d:80:
a5:c8:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:20:31 2025 by rpki-client